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Description 

Government Rights 

s This invention was made with U.S. Government support under Local Subcontract SO-124465-S and 

MDA904-93-C4074. The U.S. Government has certain rights in this invention. 

Field of the Invention _ 
10 This invention relates to biometric, personal authentication systems that authenticate identities of individuals. 

Background of the Invention 

Personal recognition systems generally utilize a single highly specific characteristic for identifying valid access 
is requests, sometimes in association with another method of individual authentication. 

Published patent application NL 6503290, (Sibum) according to an uncertified English translation teaches identi- 
fying a person by recognition of a stored pattern, e.g. fingerprint, preventing unauthorized access or use, using pattern 
analysis with determination of body heat and/or hair size and color to prevent use of a falsified replica of the fingerprint. 

Thus, this document teaches identifying a person by recognition of at least an inherently specific biometric param- 
20 eter of said person, e.g. finger print, and detecting a non-specific biometric parameter comparable to physiological 
norms such as the body heat during the authentication. 

Published PCT patent application WO 90/08366 (Clayden) teaches identification of a person by monitoring one 
or a number of "biometric" parameters such as bone structure, temperature, fingernail pattern, creases in the palm or 
fingers of the hand and comparing the monitored data with stored characteristics. Further, teachings include reference 
25 to speech, handwriting and piano keyboard "signatures'. 

U.S. Pat. No. 4,896,363, (Taylor) teaches a method for analysis and comparison of a "live" fingerprint to a stored 
record and an apparatus for functional use of the method. Commercial products described in Taylor include personal 
access apparatus manufactured by Thumbscan Corporation. 

U.S. Pats. Nos. 4,869,254 and 5,078,136 (both Stone et al.) teach a method for non-invasive measurement and 
30 calculation of oxygen saturation on blood in the human body under transient conditions and describe apparatus for 
functional use of the method. Commercial products described in Stone et al. are widely identified as pulse oximeters. 

U.S. Pat. No. 5,1 03,486 (Grippi) teaches a scanning of a combination of fingerprint with an overwritten projection 
of a signature to identify an individual, and claims the projection of "any biological feature of the user". A biological 
feature is described as live skin tissue. 

35 

Summary of the Invention 

None of the authentication, recognition, or access control systems in the art recognize the problem that biometric 
devices can be circumvented by presenting the biometric pattern of an authorized individual seeking biometric, personal 
4C authentication who has been incapacitated, dismembered, or is deceased at the time of attempted authentication, 
recognition, or access. 

Stated another way, none of the authentication, recognition, or access control systems in the art recognize the 
possibility that biometric parameters can be correlated or otherwise interrelated in order to assure that an individual 
seeking biometric, personal authentication is actually present for authentication. Existing devices can be circumvented 

*s by someone, other than the genuine person seeking authentication, actually presenting the biometric pattern of an 
authorized individual seeking biometric, personal authentication. 

For example, a fingerprint analysis that does not recognize whether the finger is attached to a living human being 
can be circumvented by electronic or photographic reconstructions of the fingerprint or dismemberment of the finger 
Other evidence the art presently employs for confirmation can be circumvented by use of subterfuge and substitution. 

so The present invention solves a problem unrecognized in the art by providing a biometric, personal authentication 

system that requires correlation among a unique, inherently specific biometric parameter with at least one non-specific 
biometric parameter having measurable variability during the time of authentication in a physiologically acceptable 
range. 

Previously, the art has considered two kinds of errors. The first kind is where the authentication system would 
ss erroneously reject authentication of a truly authorized user. The second kind of error is where the authentication system 
would erroneously accept authentication of a truly unauthorized user. Both kinds of error are based on the accuracy 
and precision of authentication based on a unique, inherently specific biometric parameter. The parameter can be too 
severely applied, (rejecting authentication when it should be accepted,) or too loosely applied, (accepting authentication 
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when it should be rejected). In general, the two kinds of errors for a recognition system using a single, unique, inherently 
specific biometric parameter are inversely related. Reducing the error rate for false rejection increases the false ac- 
ceptance rate, and vice versa. Authentication systems, especially access systems, are faced with this dilemma. 

The present invention considers a third kind of error and solves a problem that the art has not recognized. An 

5 unrecognized third possible error is where the authentication system would erroneously accept authentication of a truly 
unauthorized user attempting to gain access using the pattern of a unique, inherently specific biometric parameter from 
an authorized user. The errors of the first and second kind, and solutions to treat such errors, do not consider or 
adequately measure the risk of circumvention of the authentication system. 

The present invention solves errors of the third kind by providing an authentication system that recognizes a unique, 

io inherently specific biometric parameter and other non-specific biometric parameters that need not be unique to the 
individual but are comparable to physiological norms and are variable during the time of authentication. 

The present invention solves the problem that at least two modes of biometric recognition must fail or be circum- 
vented in order to authenticate an unauthorized user. 

"Biometric parameters' means dimensional and physiological characteristics of an individual human. Some bio- 

is metric parameters (e.g., fingerprints (including thumbprints), palm prints, pore prints, voice prints, handwriting (including 
signature), and retinal configurations), are both unique and inherently specific and are relatively easy to copy and 
reproduce or model for later comparison for purposes of authentication. Fingerprint analysis refers to the identification 
and measurement of minutia points (bifurcations and end points). Pore print analysis refers to the identification and 
measurement of pores within the ridges of the fingers. 

20 Other biometric parameters are non-specific and not unique to an individual. Some non-specific biometric param- 

eters include dimensional characteristics (e.g., bone structure, and physical dimensions) and skin temperature that 
are not likely to have some variability during the time required for authentication and physiological characteristics (e. * 
g., electrocardiographic (EKG) signals, pulse, and spectral characteristics of human tissue) that are likely to have some 
measurable variability during the time required for authentication. Of the two, physiological characteristics are more 

25 meaningful to biometric, personal authentication because such physiological characteristics are more difficult to sim- \ 
utate because such measurements are observable within physiological ranges, variable in time and, in characteristics 
such as EKG and pulse, synchronizabfe within a single human body. 

One or more non-specific biometric parameters used in combination with one or more unique, inherently specific 
biometric parameters provides extremely high precision protection against circumvention, and does not require time ' 

30 consuming and inordinate measurement for authentication for purposes such as access control to a secure function 
or fitness to perform a function. Further non-specific physiological characteristics such as blood alcohol content or 
levels of controlled chemical substances (e.g., legal drugs used in illegal quantities or at illegal times or illegal drugs) 
in the body could be used to determine if an otherwise authorized user is authenticated to be in acceptable physical 
condition to be granted access to a motor vehicle or other facility or equipment. 

3$ The biometric, personal authentication system of the present invention comprises: 

(a) storage subsystem to store a unique, inherently specific biometric parameter from at least one individual in a 
species; 

(b) first recognition subsystem to detect the unique, inherently specific biometric parameter in an individual seeking 
40 personal authentication; 

(c) second recognition subsystem to detect at least one non-specific biometric parameter of a physiological char- 
acteristic having measurable variability during the time of authentication in the individual seeking personal authen- 
tication; 

(d) first comparison subsystem to compare the unique, inherently specific biometric parameter detected by the 
4S first recognition subsystem with the unique, inherently specific biometric parameter stored in the storage subsys- 
tem; 

(e) second comparison subsystem to compare each non-specific biometric parameter to physiological norms for 
the species within an acceptable range; and 

(f) authentication subsystem to confirm identity of the individual seeking personal authentication by evaluating the 
so comparisons made by first comparison subsystem and second comparison subsystem. 

Desirably, an optional step (g) includes a subsystem to use successful authentication to provide access. 

Preferably, the second recognition subsystem detects at least two non-specific biometric parameters with physi- 
ological correlation of the non-specific biometric parameters within an acceptable range. More preferably, the detection 
ss of at least two non-specific biometric parameters are synchronized. Examples of non-specific biometric parameters of 
physiological characteristics include bloodflow, spectral identity of tissue, electrocardiographic signals, pulse, blood 
oxygenation, hematocrit, biochemical assays of tissue, electrical plethysmography, skin exudates, mechanical prop- 
erties of skin, electrical properties of skin, transpiration of gases, blood pressure, and differential blood volume. 



3 



EP0 752 143 B1 

Most preferably, the biometric, personal authentication system of the present invention utilizes fingerprint analysis 
(used in this invention to include thumbprint analysis) of an individual in combination with pulse oximetry and electro- 
cardiography of the individual. The fingerprint analysis supplies the unique, inherently specific biometnc parameter 
while the data from a pulse oximeter and EKG supplies the nonspecific parameter(s), preferably both synchronized 

s in time between two non-specific parameters and correlated between the nonspecific parameters and the unique, 
inherently specific biometric parameter. Specifically the EKG signal as measured in real time is synchronized with the 
pulse measured by the pulse oximeter as change of rate of blood flow in real time. 

For example, if the fingerprint analysis matches the unique, inherently specific biometric parameter, and if the 
pulse oximeter data of pulse and percentage oxygen saturation and EKG as non-specific biomettic parameters correlate 

10 within acceptable norms, and if pulse is determined by two different and synchronizable methods (electrical and optical) 
to be synchronized, then the individual identified with the fingerprint is not incapacitated, dismembered, or deceased, 
and then authentication of the individual is achieved. Optionally, skin temperature can be added to provide further 
confirmation of viability of the individual seeking authentication. ■* t* *j 

With authentication of an individual according to the present invention, a variety of actions can be taken. Nonlimrted 

is examples of actions available to the authenticated individual include access to equipment, access to physical facilities, 
recognition of the individual tor a variety of reasons, confirmation of presence of the individual in an authonzedjocation 
or using authorized equipment, and other situations where the status of an individual is remotely determined or con- 

r ° Beyond the first level of authentication of an individual and authorization of entry to a physical facility or use of 
20 equipment, suitability of performance may be verified lor a second level of access control through measurement of 
blood gases or other characteristics, such as blood alcohol or controlled chemical substances levels, that would impair 
the individual's operation of equipment such as a mass transit vehicle. 

A feature of the present invention is that inherently specific ana; nonspecific biometric parameters can be concur- 
rently and non-invasively gathered for recognition, comparison, and determination of authentication. 
25 Another feature of the present invention is that nonspecific biometric parameters need not be identified to the 

individual seeking personal identification. 

An advantage of the present invention is that individuals seeking personal authentication undergo multiple biometric 
parameter comparison with security measures that potentially avoid false authentication. 

One optional feature of the invention includes the use of information input and data entry apparatus to minimize 
30 searching of stored data of the unique, inherently specific biometric parameter, such as by use of a personal identifi- 
cation number or code, a photo, or other means. ^ . 0 . 

Another optional feature of the invention includes apparatus for reading and analyzing encoded and encrypted 
information resident on magnetic or optical media or a hologram stored on a plastic card possessed by the individual 
seeking authentication, rather than stored in the apparatus for receiving data of the unique, inherently specific biometnc 

parameter^ ^ ^ ^ jnvention js tQ provid0 addit j 0 nal authentication using apparatus that identifies and 

compares more than-one unique, inherently specific biometric parameters such as written signature, retinal configu- 
ration, voice recognition, or physical dimensions of the individual or features of the individual. 

40 Brief Description of the Drawings 

, FIG. 1 is a schematic illustration of a preferred embodiment of the invention. 
FIGS 2a 2b, and 2c are plan views of a preferred embodiment of the invention. ' 
FIGS. 3a', 3b, and 3c are cutaway views of a preferred embodiment of the invention showing positions of the 

45 measurement apparatus. . ^^^ rn ^ r ^ 

FIG. 4 is a block diagram of the apparatus for recognizing the nonspecific biometnc parameter of electrocardio- 

9raP FIG S 5^a block diagram of the apparatus for recognizing the nonspecific biometric parameter of blood oxygen 

so ^"rg™" is a block diagram of the apparatus for recognizing the nonspecific biometric parameter of skin temperature. 
FIG 7 is a flow chart for completing authentication according to the present invention. 

FIG. 8 is an electrical schematic illustration of circuitry for processing the nonspecific biometnc parameter of 
electrocardiographic signals as shown in FIG. 4. , rtr 

FIG. 9 is an electrical schematic illustration of circuitry for producing pulsating power to the red and IR lamps for 
ss the non-specific biometric parameter of blood oxygen saturation as shown in FIG. 5. 

FIG. 10 is an electrical schematic illustration of circuitry for processing the signals indicating nonspecific biometric 
parameter of blood oxygen saturation as shown in FIG. 5. 

FIG. 1 1 is an electrical schematic illustration of circuitry for the temperature sensor circuit shown as a block diagram 
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in FIG 6. 

Embodiments of the Invention 

s FIG. 1 shows a schematic of a preferred embodiment of the personal, biometric authentication system of the 

present invention. This embodiment is a counter top mounted access control unit containing the data entry and sensor 
apparatus. The access control is interconnected with a protected electronic computer system to provide authentication 
of the individual requesting entry and use of the system. 

This embodiment utilizes a portion of the general purpose computer 2 for processing 6 of the non-specific biometric 

io indicator data and processing 4 of the unique fingerprint image. 

An individual seeking access first enters an identification code followed by placing both hands on contoured sur- 
faces containing various sensors for a period of approximately ten seconds until authentication is completed success- 
fully or unsuccessfully, and. preferably, access Is granted or denied. Identification code entry B is a personal identifi- 
cation code number (PIN) or can be an identification card inserted and read to request access through the access 

is system. Use of personal identification codes narrows the search process needed to compare the unique, inherently 
specific biometric parameter detected by the device with stored data. This acts to speed operations needed for estab- 
lishing personal authentication. Further the PIN number can provide an additional, preliminary level of comparison in 
the authentication process. -, ■ . . 

Authentication system elements include fingerprint image sensor 10 inputing data for analysis to computer logic 

20 and memory functions 4 for unique, inherently specific identification, and non-specific biometric sensors 24, 26, and 
28 with signal process functions 30 inputing information for analysis to computer system 6 to recognize electrocardi- 
ogram (EKG), pulse, and blood oxygen saturation for nonspecific biometric validation and skin temperature for further 
optional validation. With this combination of information the individual seeking authentication and access can be unique- 
ly identified and a determination can be made that the individual seeking authentication is not incapacitated, dismem- 

25 bered, or deceased. In other words, the biological state of the individual, as measured non-invasrvely via physiological 
characteristics that vary in time during the authentication, is used with the unique, inherently specific parameter of a 
fingerprint to authenticate that the individual is alive and functioning with acceptable physiological conditions for au- 
thentication and resulting access. 

Fingerprint recognition camera 10 and system 4 employs well known apparatus, circuitry, and software. The indi- 

30 vidual's fingerprint pattern is detected by camera 1 0 when the individual places a thumb on detector window 42, (shown 
on FIG. 2 and described below). The detected image is captured and analyzed by image processor 12, developed into 
a vector array of fingerprint minutiae which is validated by comparator 1 4 through correlation of the scanned image 
vector array with the array selected from pre-stored memory file 16 indexed by PIN. If the image matches the stored 
information, then output 18 of comparator 14, is turned on, signaling the decision process as diagrammed in FIG. 7 

35 and described below. 

Fingerprint recognition systems such as camera 1 0 working with system 4 are commercially available from Thumb- 
Scan, Inc., Lombard IL. Such system 4 is described in U.S. Pat. No. 4,896,363 (Taylor). Alternatively, camera 10 is 
commercially available as Model FC-11 Fingerprint Capture Station, from Digital Biometrics, of Minnetonka MN. When- 
Digital .Biometrics camera 10 is used, then frame grabber IP-8 Image Processing Board commercially available from 

40 Matrox Electronic Systems, LTD, of Dorual, Quebec, Canada is also used, along with comparison software commer- 
cially available from BlitzMatch, Inc. of Champaign, IL 

The pre-stored fingerprint selection pattern may be stored in a dedicated ROM memory of the fingerprint recognition 
system 4; or stored in the memory of computer terminal accessed by the individual through a standard key pad con- 
nected to a asynchronous I/O port; or entered into the security access system via a magnetic or optical identification 

45 card presented to the access instrument at the time of actuating the access system. The identification card may replace 
or supplement the entry of the PIN using the key pad. 

Non-specific biometric recognition circuitry shown in FIG. 1 include biomedical (EKG) electrodes 24 communicating 
with analog signal processor 32, light emitting diode (LED) sources (one in the visible range (about 660 nm) and the 
other in the near infrared (NIR) range (about 910 nm)) and detector 26 communicating with timed power source and 

so signal processor 34, for the plethysmography signals of the blood pulse/oxygen monitor and temperature sensor 28 
communicating with signal processor and ambient temperature sensor 36. 

After analog processing, the signals are communicated to computer system 6 digitized for analysis through inter- 
face 22 (such as a RIT-815 card available from Analog Devices of Norwood, MA). The digitized signals are processed 
wrth'tn a general purpose computer CPU, for example a IBM PS/2, available from IBM Corporation of Armonk, N.Y. The 

ss sensor processing 38 follows a logic pattern programmable by a person of ordinary skill In programming the general 
computer of choice. The logic pattern includes a variety of calculating, smoothing and comparing steps as shown in 
the flow diagram of FIG. 7. Acceptances ranges are stored in memory 20 and compared with the individual data at 
decision states 324, 328, 330 and 332 as further defined within the flow diagram of FIG 7. 
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FIG 2 is a counte counted embodiment of the securrty access instrument, shown in three vi^.^^HG. 2a 

wmmmmm 

t0 SScbS a keypad 54 for entry of PIN or other coded information input and display window 56 for 

Zrre^e apparatus to allow the individual access to the secured equpment or feebly after aulhenfcafon » 
of^ethunjpnnueg-^^^ 

- JS^^^S^ temped. - expanding the content cf sensor interface eiectron.es btock 30. 

w'SSor EKG detection are signal e.ectrodes 102 and 104 pius ground electrode 106 sho^ £ 
FIG?ThesTa^ 

of FIG 2 respectively, wherein ground electrode 106 and first biomedical electrode 104 contact the left hand and 

E£ f inafvidSl Both instrumentation amplrfier 110 and isolation amplifier 112 are powered by .solated DC-DC con- 
verter 11B providing safety protection by electrical isolation from the main power supply. 

££££ T^Ji* rSSS ,„«t Li*. ««~ ... « C 

efl When the other I^M Ison, Hie driving rate o( Hie Ugtrta to at a frequency much greater than the human head rata, 

for example 1500 Hz. 
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The detected light sampled at the same driving rate and is pulsatile in nature related directly to the normal heart 
pulse cycle. Change in detected tight intensity at the peak and at the valley phases of a particular putse cycle provides 
a relative measure of absorbance in the arterial blood. By comparing the relative absorbances at multiple wavelengths 
(usually about 910 nm and 660 nm), an oxygen saturation value can be determined for the blood of the subject. 
s Light source 1 40 delivers light at two wavelengths. One light emitting diode (LED) 1 42 emitting light at a wavelength 

. of 660 nanometers and one LED 1 44 emitting light at a wavelength of 91 0 nanometers are driven by LED drive sources 
146 and 150. The LEDs are timed by clock generator 146 generating intermittent on and off condition providing two 
distinct states for the overall light source: 910 diode on/S60 diode off shown as 156, 91 0 diode off/660_diode on shown 
as 152. 

10 Detector 170 transduces the transmitted light to an electrical signal with variable current silicon photodiode 172. 

The variable current signal is converted to a variable voltage by current to voltage amplifier 174. Detection is synchro- 
nized with the LED emitter timing, detecting and holding the light level transmitted during each of the two distinct states 
with sample and hold circuits 182, and 186. Each transmitted light signal includes both a DC and AC components 
which are separated for the blood oxygen calculation and processing in sensor processor 38. The 910 nanometer 

is signal is amplified 1 90 and filtered 1 92 to eliminate unwanted signal above 10 Hz and communicated to interface 22; 
through connection 198-D. AC component is separated by 0.3 Hz high-pass filter 194, amplified by amplifier 196 and 
communicated to interface 22 through connection 19S-A. 

Parallel processing of the 660 nanometer signal is through channel 200, 202, 204, 206 and 208-A and 208 -C. 
The blood oxygen measurement of this system is well known and described in U.S. Pat. Nos. 4,869,254 and 

20 5,078,1 36 (Stone et al.). Pulse oximeters are commercially available in the manner described by these patents, includ- 
ing light emitting diodes 142 and 144 and detector 170 sold by Nellcor Incorporated of Hayward, CA. 

Processing of the pulse oximeter signal is described herein as time domain signal processing. Clearly the process- 
ing could be done in the frequency domain by digitizing the signal directly at the sensors and using digital signal 
processing techniques. 

25 Optionally, skin temperature is measured with a solid state sensor chosen for linearity across the temperature 

range of the human body. Block diagram of the associated measurement circuit 250 is shown in FIGURE 6. Skin 
temperature sensor 252 is supplied by isolated DC/DC converter 256, for protection of the individual, voltage from 
sensor 252 is linearly dependent on the temperature, is amplified and isolated from other circuitry by amplifiers 258 
and 262. The temperature signal is filtered 264 to eliminate all frequencies above 0.5 Hz. to eliminate electrical noise 

30 and communicated to interface 22 through connection 272. Optionally, an ambient temperature sensor 254 may be 
used to compensate for environmental conditions as shown in block diagram 260. The signal from optional temperature 
sensor 254 is amplified by amplifier 261 and communicated to interface 22 through connection 268. 

Recognition and comparison for the personal, biometric authentication system is based initially on fingerprint rec- 
ognition followed by analysis of the biometric sensor signals for EKG 126, NIR light at 910 nanometer 198-A and 

35 198-C and at 660 nanometer 20B-A and 208-C, and temperature 272. Authentication is processed in an embedded 
logic program within computer 6 using programming written in WATCOM C version 9.5 f rom WATCOM International 
Corp, Waterloo, Ontario, Canada computer code in a manner known to those skilled in the art Description of the 
recognition subsystems, comparison subsystems, and authentication subsystems is shown in FIG 7. Alternatively, 
authentication can be processed using neural network programming in a manner known to those skilled in the art. 

40 Authentication processing as shown in FIGURE 7 is started with keying in a PIN by the individual seeking personal 

authentication or by insertion of an ID card communicating a PIN identification 300. The individual places his or her 
hands in the locations shown in FIGS. 2a-2c and the individual's fingerprints are scanned 340 and processed to obtain 
the reference vector 342. The appropriate record 344 is recalled from memory 16 and compared 346 for acceptance 
or rejection. If the comparison is rejected, authentication has failed, regardless of the comparison arising from the non- 
45 specific biometric parameters. In a preferred embodiment, access is denied because of the rejected authentication 
In parallel with the recognition and comparison subsystems used for fingerprint recognition with data from finger- 
print storage, the non-specific biometric recognition steps are started concurrently as shown in FIG 7. 

Biometric data are recognized and collected 310 over multiple samples (about 128) of the EKG signal, optical 
signals, and optional temperature signal taking a period of approximately 3.2 seconds with EKG signal preferably 

so collected in a period of about 0.5 seconds. The logic process then proceeds to analyze the plethysmography, EKG, 
and temperature signals by smoothing the optical and EKG signals using a five point roiling average 320, finding the 
major peaks in the EKG and 910 nm optical signals 322, calculating pulse rate of EKG and optical signals 324, finding 
valleys in the 910 nm NIR signal 326, calculating the oxygen saturation ratio from 660 nanometer and 910 nanometer 
optical signals 328, and averaging the temperature signal and calculating the average actual skin temperature 330. 

ss Next a comparison 332 is made of the pulse rate obtained concurrently by the 910 nm optical plethysmography 

signal and the EKG signals. If the pulse rate as measured by both methods is within an acceptable synchronicity, then 
logic processing continues. If there is no acceptable synchronicity, then the authentication is rejected 352, regardless 
of the results of the comparison 346 of fingerprint identification. 
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If the two pulse rates are within acceptable synchronicity, then physiological norms of oxygen saturation, pulse, 
and temperature are recalled 334 for comparison 336 with the calculated oxygen saturation ratio 328, the pulse rate 
324, and the temperature 310. If there is acceptable comparison 336, then with an acceptable fingerprint comparison 
346, there is authentication 350. If there is no acceptable comparison 336, then authentication is rejected 354 regardless 
5 of the results of fingerprint comparison 346. As presently preferred, authentication subsystem then grants access to 
equipment or facilities. 

FIG. 8 is the detail circuit diagram of the EKG circuit shown as a block diagram in FIG 4. TABLE 1 . is the listing of 
components and devices used in this circuit. 

10 TABLE 1 



COMPONENTS 




B1.B2 


NE2H Lamp 


C1.C2 


500pf 


C3 


200pf 


C4.C5.C8 


1ui 


C6.C7 


10nf 


C9,C10,C11,C12,C13,C14 


0.56u.f 


R2.R1 


300K 


R3,R4,R7 


50K 


R5.R6 


5M 


R8,R9,R10,R11,R12 


20K 


R13.R34 


2.2K 


R14 


30K 


R16 


1M 


R17 


4.75K 


R18 


47K 


R19,R20,R21,R22 t R23,R24 


10K 


R35 


100 


R36.R37 


22K 


R64 


1K 


DEVICES 


U1.U3, U4 




Operation Amplifier: 


LF444CN 


National Semiconductor 




Santa Clara, CA 




U2 




High Vottage Isolation Amplifier 


ISO107A 


Burr-Brown 




Tucson, AZ 




D1.D2.D3.D4 


1N4148 


D6.D7 


1N914 


Diode: National Semiconductor 




Santa Clara, CA 





FIG. 9 is the detail circuit diagram of the blood oximeter light power circuit shown as a block diagram 140 in FIG 
5. TABLE 2 is the listing of components and devices used in this circuit. 



TABLE 2 


COMPONENTS 




C21 




1.0uJ 


C19 




0.01 uJ 


C20 




4700pf 
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TABLE 2 (continued) 



5 



10 



is 



30 



35 







C22 


4.9uJ 


C25 


5 3pj 


C32 


5.4*±f 


C40 


1ui 


R40 


1M 


R41 


47K 


R46.R49.R50 


10K 


R38 


1K 


R39 


200K 


R45.R43 


4.7K 


R47.R48 


470 a 


R42 t R44,R51 


1012 


DEVICES 


U9 


LM555CN-1500 Hz 


Clock/Timer; National Semiconductor 




Santa Clara, CA 




U10 


DG211 


Analog Switch: Siliconix 




Santa Clara, CA 




D5 


1N4148 


Diode: National Semiconductor 




Santa Clara, CA 




Q1.Q2 


2N4403 


03,04,05,06 


2N4401 


Transistor National Semiconductor 




Santa Clara, CA 




U4 


LF444C4 


Operational Amplifier 




National Semiconductor 




Santa Clara, CA 




U14 


74HCT04 


Gate 




National Semiconductor 




Santa Clara, CA 





FIG. 10 is the detail circuit diagram of the blood oximeter read circuit shown as a block diagram 170 in FIG 5. 
TABLE 3 is the listing of components and devices used in this circuit. 



TABLE 3 



so 
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• COMPONENTS 




C42.C43 


0.1u.f 


C44,C45,C47,C48,C49, 


0 47uf 


C50,C52,C53,C56 




C57 


10pf 


R15 


10M 


R54,R55,R56,R57 t 


25K 


R62,R63,R64,R65 




R52.R53 


560 


R66.R58 


1.0M 
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TABLE 3 (continued) 





COMPONENTS 




$ 


R67.R59 
R60.R68 


5K 
330K 




DEVICES 


10 


U6, U7, U8 

Operation Amplifier: 


LF444CN 


15 


National Semiconductor, Santa Clara, CA 
U12.U11 

Sample and Hold: 
National Semiconductor, Santa Clara, CA 


LF398 



FIG. 11 is the detail circuit diagram of the temperature sensor circuit shown as block diagrams 250 and 260 in FIG 
6. TABLE 4 is the listing of components and devices used in this circuit. 



TABLE 4 



COMPONENTS 




C15 


1.0u,f 


R30 


475K 


R26.R29.R32.R33 


4.75K 


R2B.R25 


100K 


R27 


23.5K 


R31 


240K 


DEVICES 


U4 


LF444CN 


Operation Amplifier: 




National Semiconductor 




Santa Clara, CA 




DS1 


E10051 


Murata Manufacturing Co. Ltd. 




Kyoto, Japan 




T2 


LM34 


National Semiconductor 




Santa Clara, CA 





While embodiments of the invention have been disclosed, the following claims disclose the scope of the invention. 



Claims 

1. A biometric, personal authentication system, comprising: 

(a) storage subsystem to store a unique, inherently specific biometric parameter from at least one individual 
in a species; 

(b) first detection subsystem to detect the unique, inherently specific biometric parameter in an individual 
seeking personal authentication; 

(c) second detection subsystem to detect at least one non-specific biometric parameter of a physiological 
characteristic having measurable variability during the time of authentication in the individual seeking personal 
authentication; 

(d) first comparison subsystem to compare the unique, inherently specific biometric parameter detected by 
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the first detection subsystem with the unique, inherently specific bkxnetric parameter stored in the storage, 
subsystem; 

(e) second comparison subsystem to compare each non-specific bkxnetric parameter to physiological norms 
for the species; and 

(f) authentication subsystem to confirm identity of the individual seeking personal authentication by evaluating 
the comparisons made by first comparison subsystem and second comparison subsystem. 

2. The system according to Claim 1 , wherein second detection subsystem detects and second comparison subsystem: 
compares at least two non-specific bkxnetric parameters with a physiological correlation between the two non- 
specific biometric parameters within an acceptable range. 

3. The system according to Claims 1 -2, wherein storage subsystem is used to limit database searching by processing 
a personal identification code number; or wherein storage subsystem is resident on a card possessed by an indi- 

" vidua! or wherein the storage subsystem also enrolls data of the unique, inherently biometric detection system. 

4. The system according to Claims 1-3, wherein the non-specific biometric parameter is selected from the: group 
consisting of pulse rate, electrocardiographic signals, spectral characteristics of human tissue, percentage oxy- 
genation of blood, bloodflow, hematocrit, biochemical assays of tissue, electrical plethysmography, skin exudates, 
mechanical properties of skin, transportation of gases, blood pressure, differential blood volumes, and combina- 
tions thereof. 

5. The system according to Claims 1-4, wherein the non-specific biometric parameters further include skin temper-, 
ature. 

6. The system according to Claims 1^5, wherein the unique, inherently specific biometric parameter is selected from, 
the group consisting of fingerprint, pore print, palm print, voice print, and retinal configuration. 

7. The system according to Claims 1-6, further comprising an access subsystem to measure alcohol or controlled 
chemical substance levels in blood of an individual successfully authenticated. 

8. Equipment comprising the system of Claims 1-7 to control access to a facility by authentication of an individual 
using the system of Claims 1 -7. 

9. The equipment according to Claim 8 wherein the system further comprises an access subsystem to measure 
alcohol or controlled chemical substance levels in blood of an individual successfully authenticated and wherein 
access to the equipment is controlled by the access subsystem after an individual is successfully authenticated. 

10. A method to authenticate an individual using the system of Claims 1-7 comprising the steps of : 

(a) placing both hands of an individual in a device containing the system of Claims 1 -7 that concurrently rec- 
ognizes a unique, inherently specific biometric parameter and recognizes at least one non-specific biometric 
parameter of a physiological characteristic having measurable variability during the time of authentication; and 

(b) comparing biometric parameters detected by the system of Claims 1-7 to confirm identity of the individual 
seeking personal authentication. 



Patentanspruche 



1. Biometrisches Personenauthentiftzierungssystem mit: 

(a) einem Speicherteilsystem zum Speichern eines einmaligen, inharent spezifischen biometrischen Parame- 
ters mindestens eines Individu urns einer Art; 

(b) einem ersten Nachweisteilsystem zum Nachweis des einmaligen, inharent spezifischen biometrischen 
Parameters eines urn personliche Authentifizierung ersuehenden Individuums; 

(c) einem zweiten Nachweisteilsystem zum Nachweis mindestens eines nichtspezifischen biometrischen Pa- 
rameters eines physiologischen Merkmals des um personliche Authentifizierung ersuehenden Individuums; 
das wan rend der Zeitdauer der Authentifizierung meGbar veranderlich ist; 

(d) einem ersten Vergleichsteilsystem zum Vergleichen des durch das erste Nachweisteilsystem nachgewie- 
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senen einmaligen, inharent spezifischen biometrischen Parameters mit dem im Speicherteilsystem gespei- 
cherten einmaligen, inharent spezifischen biometrischen Parameter; 

(e) einem zweiten Vergleichsteilsystem zum Vergleichen jedes nichtspezifischen biometrischen Parameters 
mit physiologischen Normdaten fQr die Art; und 
b (f) einem Authentifizierungsteilsystem zum Bestatigen der Identitat des urn person liche Authentifizierung er- 

suchenden Individuums durch Auswerten der durch das erste und das zweite Vergleichsteilsystem erhaltenen 
Vergleichsergebnisse. 

2. System nach Anspruch 1 . wobei mindestens zwei nichtspezifische biometrische Parameter durch das zweite Nach- 
io weisteilsystem nachgewiesen und durch das zweite Vergleichsteilsystem verglichen werden, wobei innerhalb ei- 

nes Toleranzbereichs eine physiologische Korrelation zwischen den beiden nichtspezifischen biometrischen Pa- 
rametem besteht. 

3. System nach Anspruch 1 oder 2, wobei das Speicherteilsystem verwendet wird, um die Datenbanksuche zu be- 
ts grenzen, indem eine Personenidentifizierungs-Codenummer verarbertet wird, oder wobei das Speicherteilsystem 

auf einer im Besitz eines Individuums befindlichen Karte vorhanden ist oder wobei das Speicherteilsystem auch 
Daten des einmaligen, inharent biometrischen Eriassungssystems enthalt. 

4. System nach einem der Anspruche 1 bis 3, wobei der nichtspezifische biometrische Parameter aus der Pulsfre- 
20 quenz, elektrokardiographischen Signalen, Spektralmerkmalen des menschlichen Gewebes, der prozentualen 

Sauerstoffaufnahme des Blutes, der Perfusion, dem Hamatokrit, biochemtschen Gewebeuntersuchungen, der 
elektrischen Plethysmographie, Hautexsudaten, mechanischen Eigenschaften der Haut, Gastransporteigenschaf- 
ten, dem Blutdruck, differentiellen Blutvolumina und Kombinatipnen davon ausgewahlt wird. 

25 5. System nach einem der Anspruche 1 bis 4, wobei die nichtspezifischen biometrischen Parameter auBerdem die 
Hauttemperatur umfassen. 

6. System nach einem der Anspruche 1 bis 5, wobei der einmalige, inharent spezifische biometrische Parameter aus 
einem Fingerabdruck, Porenabdruck. Handflachenabdruck, Stimmabdruck und der Netzhautstruktur ausgewahlt 

30 wird. 

7. System nach einem der Anspruche 1 bis 6, das femer ein zutritts- oder Zugriffsteilsystem zum Messen des Alko- 
holgehalts oder des Gehafts einer kontrollierten chemischen Substanz im Blut eines erfolgreich authentifizierten 
Individuums aufweist. 

35 

8. Vorrichtung mit dem System nach einem der Anspruche 1 bis 7 zur Steuerung des Zutritts oder Zugriffs zu einer 
Einrichtung durch Authentifizieren eines Individuums unter Verwendung des Systems nach einem der Anspruche 
1 bis 7. 

to 9. Vorrichtung nach Anspruch 8, wobei das System auBerdem ein Zutritts- oder Zugriffsteilsystem zum Messen des 
Alkoholgehalts oder des G ehalts einer kontrollierten chemischen Substanz im Blut eines erfolgreich authentifizier- 
ten Individuums aufweist und wobei der Zutritt oder Zugriff zu der Einrichtung durch das Zutritts°der Zugriffsteil- 
system gesteuert wird, nachdem ein Individuum erfolgreich authentifiziert ist. 

<$ 10. Verfahren zum Authentifizieren eines Individuums unter Verwendung des Systems nach einem der Anspruche 1 
bis 7, mit den Schritten: 

(a) Anordnen beider Hande eines Individuums in einervorrichtung, die das System nach einem der Anspruche 
1 bis 7 aufweist, das einen einmaligen, inharent spezifischen biometrischen Parameter und gleichzeitig min- 

50 destens einen nichtspezifischen biometrischen Parameter eines physiologischen Merkmals erkennt, das wah- 

rend der Zeitdauer der Authentifizierung meftbar veranderlich ist; und 

(b) Vergleichen der durch das System nach einem der Anspruche 1 bis 7 nachgewiesenen biometrischen 
Parameter, um die Identitat des um personliche Authentifizierung ersuchenden Individuums zu bestatigen. 

55 

Revindications 

1. Un systems cTauthentification personnels biometrique comprenant: 
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(a) un sous-systeme de memorisation pour m6moriser un parametre biometrique special, specifique de facon 
inherente, provenant d'au moins un individu d'une espece; 

(b) un premier sous-systeme de detection pour detecter dans un individu qui recherche une authentification 
personneite le parametre biometrique special, specifique de maniere inherente; 

(c) un deuxieme sous-systeme de detection pour detecter au moins un parametre biometrique non specifique 
d'une caracteristique physiologique a variabilrte mesurable, dans Findividu recherchant une authentification 
personneile, pendant le temps cfauthentrflcation; 

(d) un premier sous-systeme de comparaison pour comparer le parametre biometrique special, specifique de 
facon inherente, detecte par le premier sous-systeme de detection au parametre biometrique special, speci- 
fique de maniere inherente, memorise dans le sous-systeme de memorisation; 

is (e) un deuxieme sous-systeme de comparaison pour comparer a des normes physiologiques de respece 

chaque parametre biometrique non specifique; et 

(f) un sous-systeme cfauthentification pour confiimer I'identite de P individu qui recherche une authentification 
personneile en evaluant les comparaisons effectu6es par te premier sous-systeme de comparaison et le 
20 deuxieme sous-systeme de comparaison. 

2. Le systeme selon la revendication 1 dans lequel le deuxieme sous-systeme de detection detecte et le deuxieme 
sous-systeme de comparaison compare au moins deux parametres biometriques non specifiques, une correlation 
physiologique entre les deux parametres biometriques non specifiques etant comprise a I'interieur d'une plage 

25 acceptable. 

3. Le systeme seion f une des revendications 1 ou 2, dans lequel te sous-systeme de memorisation est utilise pour 
Mm iter une recherche en base de donn6es en traitant un numero de code d'identification personnel; ou dans lequel 
le sous-systeme de memorisation est residant sur une carte possedee par un individu ou dans lequel le sous- 

30 systeme de memorisation inscrit aussi des donnees du systeme de detection special biometrique de facon inhe- 

rente. 

4. Le systeme selon I'une des revendications 1 a 3, dans lequel le parametre biometrique non specifique est selec- 
tionnedans le groupe constitue par le pouls, des signaux eiectrocardiographiques, des caracteristiques spectrales 

35 d'un tissu humain, un pourcentage d'oxygenation du sang, recoupment sanguin, un h6matocrite, des dosages 

biochimiques d'un tissu, une piethysmographie electrique, des exsudats de la peau, des proprietes mecaniques 
de la peau, un transport de gaz. une pression sanguine, des volumes sanguins differentials, et des combinaisons , 
de ceux-ci. 

40 5. Le systeme selon I'une des revendications 1 a 4, dans lequel les parametres biometriques non specifiques incluent 
en outre la temperature de la peau. 

6. Le systeme selon I'une des revendications 1 a 5, dans lequel le parametre biometrique special, specifique de facon 
inherente est selectionne a partir du groupe constitue par des empreintes digitales, des empreintes de pores, des 

45 empreintes de paumes, une empreinte vocale et une configuration retinienne. 

7. Le systeme selon I'une des revendications 1 a 6 qui com p rend en outre un sous-systeme d'acces pour mesurer, 
dans le sang d'un individu authentifie avec succes, des nrveaux d'alcool ou d'une substance chimique contr6l6e. 

so 8. Equipement comprenant le systems selon I'une des revendications 1 a 7, pour commander I'acces a une installation 
par authentification d'un individu en utilisant le systeme selon Tune des revendications 1 a 7. 

9. L'equipement selon la revendication 8 dans lequel le systeme comprend en outre un sous-systeme d'acces pour 
mesurer, dans le sang d'un individu authentifie avec succ6s. des nrveaux d'alcool ou d'une substance chimique 
contrdiee et dans lequel I'acces a F equipement est commande par le sous-systeme d'acces aprfcs authentification 
reussie d'un individu. 

10. Un procede cfauthentification d'un individu en utilisant le systeme selon I'une des revendications 1 a 7 comprenant 
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fas Stapes consistant a: 

(a) placer las daux mains d'un individu dans un disposrtif contenant la systeme salon Tune das revendications 
1 a 7 qui, simultanement, reconnaTt un parametre biometrique special, speciftque de facon inherente, at re- 
connaTt au moins un parametre biometrique non specrfique d'une caracteristique physiologique a variabilite 
mesurable pendant la periode d'authentification; et 

(b) comparer des parametres biometriques detectes par le systeme selon i'une des revendiqations 1 a 7 afin 
de confirmer Pidentite de I'individu qui recherche une authentication personnelle. 
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Fig. 2b 
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